yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1226171] Re: When using per-domain-identity backend, user_ids could collide

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Russell Bryant <1226171@xxxxxxxxxxxxxxxxxx>
Date: Thu, 24 Jul 2014 12:13:48 -0000
Reply-to: Bug 1226171 <1226171@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: keystone
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1226171

Title:
  When using per-domain-identity backend, user_ids could collide

Status in OpenStack Identity (Keystone):
  Fix Released
Status in OpenStack Compute (Nova):
  Fix Released

Bug description:
  When using the per-domain-identity backend usernames could end up
  colliding when multiple LDAP backends are used since we extract very
  limited information from the DN.

  Example

  cn=example user, dc=example1,dc=com
  cn=example user, dc=example2,dc=com

  Would net the same "user_id" of "example user"

  This can also affect groups in the same manner.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1226171/+subscriptions